Not rated
CVE-2017-4940 The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before…
Description
The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ESXi | Versions not published |
References
- www.vmware.com www.vmware.com
- 1040024 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of ESXi
The 29 CVEs of ESXi →
CVE-2025-41239
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage…
7.1
High
CVE-2025-41238
VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)…
9.3
Critical
CVE-2025-41237
VMCI integer-underflow vulnerability
9.3
Critical
CVE-2025-41236
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A…
9.3
Critical